Mould King 33043 Super F Quad - HS6200 RF chip

Mould King 33043 Super F Quad SPI capture data :
www.mediafire.com/download/10wxe8a938vx9qg/MK33043-01%7E05.zip

It used a HS6200 RF chip, it's is compatible with BK2425, nRF24L01+
www.sunrisedigit.com/en/Show.asp?id=38

Would someone confirm it ? and deviate it ?

But I got problem when I captured SPI data, I can't bint it with quad. if my analyzer connected to TX ......

Thanks a lot.

Forgot the pictures.

The nrf24L01 decoder is giving good results at leats right after init. So yes it's a nrf24L01 compatible chip. There are multiple unknown registers at the begining but if there is a datasheet somewhere it should not be an issue.

planger wrote: The nrf24L01 decoder is giving good results at leats right after init. So yes it's a nrf24L01 compatible chip. There are multiple unknown registers at the begining but if there is a datasheet somewhere it should not be an issue.

Hi Pascal,

Thanks for your help. it's a great news to know that's a nrf24l01 compatible chip,
I uploaded the datasheet of HS6200 HERE and hope it could help.

goebish wrote: Ok, looks like it's using 500kbps, so there's nothing to do with a NRF24L01
34 W_REGISTER(06 RF_SETUP) 47

0x47 = 0100 0111, which means 4dbm output, 500kbps, no continuous wave

It might be possible to emulate it with the A7105, but that would require quite a bit of work ...

No, I was wrong, I think it's using 1Mbps after all.

Good news ~~ Thanks a lot.

Hi guys,

Any news about using nrf24l01 to clone HS6200? I'm trying unsuccessfully.

What about 0x1E and 0x1F HS6200 registers that are not present in nrf24L01. Analyzing SPI I can see that they are used frequently. Do you have the same situation?

thanks

You're right. Thanks for your reply.

I was trying a nrf clone because I don't have another HS6200 unless the one from the controller and couldn't find an easy way to order another. But I will find a solution.

thanks

I'm working on it thanks

in fact It's not the mk33043, but another drone using the same transceiver.

I tried and it's not directly compatible

Sniffing directly the Tx SPI I have this code:


Apparently it uses the HS6200 "protocol engine". I will set the same address, data rate, channel, disable enhanced shockburst, disable CRC and try it out.

I let you know the result

Good news. It's possible to sniff the HS6200 using nrf.

I'm receiving these messages:




I know sniffing the SPI with a logic analyzer that the transmitter sends the payload: 0x00;0x80;0x40;0x80;0x80;0x40;0x40;0x00;0xBF

As shown:
6.686249 00074 13675 0xB0 0x0E Disable autoack on this specific packet
6.686300 00052 13675 0x00 0xAE Data: 0b00000000 (0x00)
6.686350 00050 13675 0x80 0xA6 Data: 0b10000000 (0x80)
6.686417 00067 13675 0x40 0x60 Data: 0b01000000 (0x40)
6.686467 00050 13675 0x80 0xA8 Data: 0b10000000 (0x80)
6.686535 00068 13675 0x80 0x98 Data: 0b10000000 (0x80)
6.686584 00050 13675 0x40 0x98 Data: 0b01000000 (0x40)
6.686652 00068 13675 0x40 0x98 Data: 0b01000000 (0x40)
6.686702 00050 13675 0x00 0x98 Data: 0b00000000 (0x00)
6.686769 00067 13675 0xBF 0x98 Data: 0b10111111 (0xBF)

I've already shifted the bits to correct 9 bits PCF. My arduino code:



I don't know exactly why it's not working. Any ideas?

Analyzing many cases I can see a pattern, at least for the first payload byte the most significant bit is flipped.